blob: 85dec84552741066c64398aba87c278d8ac59be7 [file]
#!/bin/bash
# Licensed to the Apache Software Foundation (ASF) under one
# or more contributor license agreements. See the NOTICE file
# distributed with this work for additional information
# regarding copyright ownership. The ASF licenses this file
# to you under the Apache License, Version 2.0 (the
# "License"); you may not use this file except in compliance
# with the License. You may obtain a copy of the License at
#
# http://www.apache.org/licenses/LICENSE-2.0
#
# Unless required by applicable law or agreed to in writing,
# software distributed under the License is distributed on an
# "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY
# KIND, either express or implied. See the License for the
# specific language governing permissions and limitations
# under the License.
#
PROBE_TYPE=$1
DORIS_HOME=${DORIS_HOME:="/opt/apache-doris"}
CONFIG_FILE="$DORIS_HOME/be/conf/be.conf"
DEFAULT_HEARTBEAT_SERVICE_PORT=9050
DEFAULT_WEBSERVER_PORT=8040
# enable_tls specify use tls connection or not.
ENABLE_TLS=
# tls_certificate_path specify the client certificate
TLS_PRIVATE_KEY_PATH=
# tls_certificate_path specify the path of public crt.
TLS_CERTIFICATE_PATH=
#tls_ca_certificate_path specify the path of root ca.
TLS_CA_CERTIFICATE_PATH=
log_stderr()
{
echo "[`date`] $@" >&2
}
function parse_config_file_with_key()
{
local confkey=$1
esc_key=$(printf '%s\n' "$confkey" | sed 's/[[\.*^$()+?{|]/\\&/g')
local confvalue=$(
grep -v '^[[:space:]]*#' "$CONFIG_FILE" |
grep -E "^[[:space:]]*${esc_key}[[:space:]]*=" |
tail -n1 |
sed -E 's/^[[:space:]]*[^=]+[[:space:]]*=[[:space:]]*//' |
sed -E 's/[[:space:]]*#.*$//' |
sed -E 's/^[[:space:]]+|[[:space:]]+$//g'
)
log_stderr "[info] read 'be.conf' config [ $confkey: $confvalue]"
echo "$confvalue"
}
parse_tls_connection_variables()
{
ENABLE_TLS=$(parse_config_file_with_key "enable_tls")
TLS_PRIVATE_KEY_PATH=$(parse_config_file_with_key "tls_private_key_path")
TLS_CERTIFICATE_PATH=$(parse_config_file_with_key "tls_certificate_path")
TLS_CA_CERTIFICATE_PATH=$(parse_config_file_with_key "tls_ca_certificate_path")
}
function alive_probe()
{
local heartbeat_service_port=$(parse_config_file_with_key "heartbeat_service_port")
heartbeat_service_port=${heartbeat_service_port:=$DEFAULT_HEARTBEAT_SERVICE_PORT}
if netstat -lntp | grep ":$heartbeat_service_port" > /dev/null ; then
exit 0
else
exit 1
fi
}
ready_probe_with_tls()
{
local webserver_port=$(parse_config_file_with_key "webserver_port")
webserver_port=${webserver_port:=$DEFAULT_WEBSERVER_PORT}
local fqdn=`hostname -f`
if ! getent hosts "$fqdn" >/dev/null 2>&1 && ! nslookup "$fqdn" >/dev/null 2>&1; then
exit 1
fi
local url="https://${fqdn}:${webserver_port}/api/health"
local response=$(curl --tlsv1.2 --cert $TLS_CERTIFICATE_PATH --cacert $TLS_CA_CERTIFICATE_PATH --key $TLS_PRIVATE_KEY_PATH -s -w "\n%{http_code}" $url)
local http_code=$(echo "$response" | tail -n1)
if [[ "$http_code" != "200" ]]; then
exit 1
else
exit 0
fi
#
# local res=$(echo "$response" | sed '$d')
# local status=$(jq -r ".status" <<< $res)
# if [[ "x$status" == "xOK" ]]; then
# exit 0
# else
# exit 1
# fi
}
ready_probe_with_no_tls()
{
local webserver_port=$(parse_config_file_with_key "webserver_port")
webserver_port=${webserver_port:=$DEFAULT_WEBSERVER_PORT}
local host=`hostname -f`
if ! getent hosts "$host" >/dev/null 2>&1 && ! nslookup "$host" >/dev/null 2>&1; then
exit 1
fi
local url="http://${host}:${webserver_port}/api/health"
local response=$(curl -s -w "\n%{http_code}" $url)
local http_code=$(echo "$response" | tail -n1)
if [[ "$http_code" != "200" ]]; then
exit 1
else
exit 0
fi
# fi
#
# local res=$(echo "$response" | sed '$d')
# local status=$(jq -r ".status" <<< $res)
# if [[ "x$status" == "xOK" ]]; then
# exit 0
# else
# exit 1
# fi
}
function ready_probe()
{
if [[ "$ENABLE_TLS" == "true" ]]; then
ready_probe_with_tls
else
ready_probe_with_no_tls
fi
}
parse_tls_connection_variables
if [[ "$PROBE_TYPE" == "ready" ]]; then
ready_probe
else
alive_probe
fi